Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,406
Reset filtersSulu HTML Injection via Autocomplete Suggestion
phpMyFAQ vulnerable to stored XSS on attachments filename
phpMyFAQ sharing FAQ functionality can easily be abused for phishing purposes
phpMyFAQ User Removal Page Allows Spoofing Of User Details
PHPMailer Local file inclusion
PHPMailer Shell command injection
Bref vulnerable to Body Parsing Inconsistency in Event-Driven Functions
Bref Doesn't Support Multiple Value Headers in ApiGatewayFormatV2
Bref's Uploaded Files Not Deleted in Event-Driven Functions
Statmic CMS vulnerable to account takeover via XSS and password reset link
C5 Firefly III CSV Injection.
Host header injection in the password reset
SQL Injection in Admin download files as zip
drupal/swiftmailer - SA-CONTRIB-2024-006
drupal/tfa - SA-CONTRIB-2024-003
No permission checks for editing/deleting records with CSV import form
Broken Access Control order API in Shopware
Blind SQL injection in shopware
Drupal core - SA-CORE-2024-001
Drupal Denial of Service vulnerability
WWBN AVideo Insufficient Entropy vulnerbaility
Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access GDPR extracts
Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access customers duplicates list
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.